“Customer data may have been compromised as a third-party unrelated to Bank of America. As standard procedure, if we see misuse, or the potential for misuse, we do not only notify the customer but block the card.”